$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft File: B3vNZjsOY7316bgJr3Gu8eWt9js.mft (raw, json) Hash identifier: ehfw4YD58+ausiuEyV4DSkmvX9P6YPStPld2xSn/2Yw= Subject key identifier: A2:5C:07:41:FF:70:02:2C:6F:A0:AE:CD:91:20:F6:B9:91:52:D9:37 Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B Certificate issuer: /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft Manifest number: A8 Signing time: Fri 17 Apr 2026 06:58:02 +0000 Manifest this update: Fri 17 Apr 2026 06:58:01 +0000 Manifest next update: Fri 24 Apr 2026 06:58:01 +0000 Files and hashes: 1: B3vNZjsOY7316bgJr3Gu8eWt9js.crl (hash: JNYwHiG1zBUAG8VjWP4f+U217pa0vBZRPBFKFoFJ/Lw=) 2: 0322BF5A6D3411F0A208C05DC4F9AE02.roa (hash: uhQqMpiNXl9wZzktHIlfZ4N3ckT6gZ7yXsNLkz5TVAs=) 3: 13CC532280EC11F0A973810CC4F9AE02.roa (hash: Vx9bjwI4dHIiRJ2+GamwQlhazgaJYjGaTfAlSelDl0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B Validity Not Before: Apr 17 06:58:01 2026 GMT Not After : Apr 24 06:58:01 2026 GMT Subject: CN=69e1d9fa-761b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:49:48:2d:bc:18:c9:f4:8a:d7:0d:3b:4a: 4a:9a:66:0e:49:30:4e:6b:e8:a0:ed:b6:cc:a3:0b: 37:84:6d:fa:6f:85:4c:b2:9e:77:2f:03:23:98:db: 9d:ef:67:9f:79:41:a1:60:8a:7f:0a:c7:7c:1b:ca: c5:8f:8f:72:bb:9a:8a:8e:9a:44:25:da:ad:09:45: 61:6a:26:14:ac:80:cf:73:45:31:69:c9:f2:1a:a5: 9e:71:30:3e:0b:08:85:5c:aa:c7:f7:64:80:c7:fa: cd:0e:b6:c4:ae:0e:b8:18:cb:c0:02:19:d7:81:6b: 9c:4b:cd:f3:a9:35:ea:44:98:c7:96:b7:ca:2e:22: 9d:bd:27:c3:0e:89:f9:23:09:6b:dc:33:cf:5a:d6: 98:59:bd:00:54:b6:8e:f3:9a:90:4b:f2:29:4f:86: 72:2f:f5:dd:62:2f:2c:58:8a:d7:b5:93:13:70:2f: 79:25:4a:47:e9:17:0c:09:08:7e:14:77:fa:a0:6f: 0f:f1:4d:5f:ec:23:68:df:32:ee:b2:20:ab:53:e9: ac:01:b8:89:c2:8d:5e:14:f0:d4:b7:94:45:8e:f5: 13:82:89:a3:6f:22:ce:f2:c3:0c:b8:44:4b:6b:f3: 74:b9:7b:00:62:09:f0:9d:a6:b7:00:68:17:9a:fd: 14:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5C:07:41:FF:70:02:2C:6F:A0:AE:CD:91:20:F6:B9:91:52:D9:37 X509v3 Authority Key Identifier: keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:36:4b:1f:b0:4d:59:db:88:62:4c:ba:fa:91:1a:a9:db:ce: 23:20:a4:e8:27:08:45:7b:a3:5e:a2:b6:89:7c:a5:7b:6a:a1: c6:91:dd:e3:fd:73:9d:0c:c9:bf:03:ca:a9:0e:d3:a6:94:73: 28:82:c3:28:b4:4c:fa:e8:4c:c9:be:f3:b5:75:af:13:e8:d7: 27:61:3f:a0:a8:50:72:7d:6f:96:50:88:1c:c2:b5:d9:68:36: a1:6f:bd:cf:da:6c:33:95:3e:a0:c6:5b:a6:aa:70:d5:b7:86: 3b:4d:ea:3c:fa:f0:8f:e5:d0:ed:16:ff:33:6b:88:b6:76:a6: 69:3d:1b:80:df:32:aa:f7:05:97:f2:b3:c5:48:fe:ef:8a:4a: 08:14:27:53:d0:cb:f5:98:11:8a:ce:e2:78:73:0f:6b:45:ba: 0f:b7:59:a1:b1:dc:9c:bf:b5:67:7b:95:c9:e5:26:0f:2a:2b: 55:e7:6d:f0:a6:b1:1f:9e:5f:be:ac:e4:eb:5f:86:76:cb:aa: d4:41:2e:4b:06:67:87:2d:cf:57:90:6b:f3:c5:5b:d7:fe:5f: 55:a6:8f:78:04:94:3f:24:2e:34:51:ac:63:7a:d5:6e:e3:bc: 82:64:2c:f0:b9:0e:ef:67:1a:5f:b3:67:16:37:10:94:9f:03: 00:db:94:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQzMDkxMTAvBgNVBAUTKDA3N0JDRDY2M0IwRTYzQkRGNUU5QjgwOUFGNzFBRUYx RTVBREY2M0IwHhcNMjYwNDE3MDY1ODAxWhcNMjYwNDI0MDY1ODAxWjAYMRYwFAYD VQQDEw02OWUxZDlmYS03NjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuABJSC28GMn0itcNO0pKmmYOSTBOa+ig7bbMows3hG36b4VMsp53LwMjmNud 72efeUGhYIp/Csd8G8rFj49yu5qKjppEJdqtCUVhaiYUrIDPc0UxacnyGqWecTA+ CwiFXKrH92SAx/rNDrbErg64GMvAAhnXgWucS83zqTXqRJjHlrfKLiKdvSfDDon5 Iwlr3DPPWtaYWb0AVLaO85qQS/IpT4ZyL/XdYi8sWIrXtZMTcC95JUpH6RcMCQh+ FHf6oG8P8U1f7CNo3zLusiCrU+msAbiJwo1eFPDUt5RFjvUTgomjbyLO8sMMuERL a/N0uXsAYgnwnaa3AGgXmv0UbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJcB0H/ cAIsb6CuzZEg9rmRUtk3MB8GA1UdIwQYMBaAFAd7zWY7DmO99em4Ca9xrvHlrfY7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDMwOS9ENDFGQTMyQzNF RTMxMUYwQjkzOTg0NDJDNEY5QUUwMi9CM3ZOWmpzT1k3MzE2YmdKcjNHdThlV3Q5 anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Izdk5aanNPWTczMTZiZ0pyM0d1OGVXdDlqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDMwOS9ENDFGQTMyQzNFRTMxMUYwQjkzOTg0NDJDNEY5QUUwMi9CM3ZOWmpzT1k3 MzE2YmdKcjNHdThlV3Q5anMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApDZLH7BNWduIYky6+pEaqdvOIyCk6CcIRXujXqK2iXyle2qhxpHd4/1znQzJ vwPKqQ7TppRzKILDKLRM+uhMyb7ztXWvE+jXJ2E/oKhQcn1vllCIHMK12Wg2oW+9 z9psM5U+oMZbpqpw1beGO03qPPrwj+XQ7Rb/M2uItnamaT0bgN8yqvcFl/KzxUj+ 74pKCBQnU9DL9ZgRis7ieHMPa0W6D7dZobHcnL+1Z3uVyeUmDyorVedt8KaxH55f vqzk61+Gdsuq1EEuSwZnhy3PV5Br88Vb1/5fVaaPeASUPyQuNFGsY3rVbuO8gmQs 8LkO72caX7NnFjcQlJ8DANuUkw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:04:37 2026 by rpki-client